Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
File:                     6be999b5-fb83-3e3f-a429-51952be4a0d4.roa (raw, json)
Hash identifier:          85+i0ghROqagWgqO2HkZ/RTslpZiI9or7w+mJkmxXlA=
Subject key identifier:   1A:85:A9:7D:E4:DE:74:32:FE:81:D2:C2:0E:C8:E3:64:17:FB:14:04
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584F7E7DCA778BB5379BE636FE40
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     14773
IP address blocks:        2620:1d5:ff1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:ca:77:8b:b5:37:9b:e6:36:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=13e04c6b-7797-4a78-a76e-1f6d7e4e87e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:65:72:30:d5:1c:33:fa:ec:5f:89:5b:3a:
                    7a:c3:5d:ef:fc:9e:dc:8e:62:88:3c:cc:7f:dc:73:
                    90:79:ff:73:3f:70:51:3f:6d:7b:97:ea:36:2e:23:
                    4c:dd:83:16:f8:6f:83:99:f6:9e:be:1d:84:f5:f1:
                    bc:dd:b1:13:5e:a8:36:a4:cc:a3:5f:08:c5:d6:d3:
                    23:f0:cf:d0:a0:34:94:85:5d:94:8b:6f:09:1b:62:
                    05:e4:e0:8d:d5:20:84:1b:a5:45:78:e4:64:c3:f8:
                    12:7e:27:86:f8:87:19:c0:50:88:3b:3a:88:a5:01:
                    14:c3:a0:91:31:36:5b:22:e5:ff:a0:93:a7:c2:10:
                    d4:3b:fe:59:29:d4:7b:ad:2a:cc:12:7e:02:37:84:
                    02:29:b4:85:36:47:ff:72:17:b0:09:ce:98:80:33:
                    ad:90:78:4e:14:83:1d:32:6d:49:67:b9:0e:60:74:
                    cd:bc:bf:b0:33:50:10:9d:45:a1:cc:94:76:bd:fc:
                    4c:c4:54:59:2a:bb:cb:ed:9d:f0:dd:a7:ba:c3:0c:
                    33:76:01:5f:ad:42:d3:46:78:f1:4d:b3:d5:78:f1:
                    14:31:96:6a:3d:3a:83:7a:5c:39:12:be:78:7b:7a:
                    6d:68:8f:42:44:9b:9a:9a:a5:38:d6:ea:9b:1a:1c:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:A9:7D:E4:DE:74:32:FE:81:D2:C2:0E:C8:E3:64:17:FB:14:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ff1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:f5:d3:30:e1:02:ca:35:ce:79:23:f3:08:c0:fb:56:e6:
         d9:d6:38:a6:b7:23:e8:a0:80:ff:40:4a:33:92:f7:6b:d2:ec:
         0c:e7:a9:6a:b0:97:0e:d0:1f:2e:ae:73:44:0b:d3:e9:49:ef:
         17:63:88:0f:ad:41:0a:c4:30:b5:4b:6f:49:46:1f:0f:55:d2:
         4a:33:8f:26:1a:4f:f5:e6:83:8c:49:68:b1:4c:d3:2d:a9:ac:
         b9:a2:de:13:cd:19:56:5c:04:d1:fa:d8:b3:14:8e:e3:95:b9:
         c1:38:d0:e6:9d:12:a0:b4:ef:21:d3:b6:db:3b:68:28:1f:63:
         32:04:51:13:2e:f8:24:09:11:ee:b0:ef:89:95:eb:86:ad:e5:
         a0:84:f1:58:57:73:a0:66:70:2e:49:df:20:f2:f2:6b:b5:7b:
         f8:2d:8f:0f:f4:b4:7c:15:9d:04:61:4c:66:8e:be:1f:41:9b:
         5a:cf:8d:a9:5d:bb:d8:f2:aa:0e:79:4b:2c:ef:07:74:cc:db:
         9c:b1:27:a6:99:ff:72:f8:8e:ed:99:93:ee:18:de:e6:d5:e6:
         be:25:61:33:d0:ac:a9:89:4c:72:22:50:ee:23:d4:36:e4:0c:
         e8:5d:a5:b8:81:37:78:1c:2c:6f:1a:c2:31:84:fd:99:42:5e:
         fc:38:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:01:10 2026 by rpki-client